pwned.coffeeUpdated 42 min ago

Past orders

A past order. It may still matter if you haven't patched.

pwned.coffeeOrder ticket · past order · 6 Nov 2026

Double espresso · 355°CcriticalOrder up · fix available

DNS: remote code execution

Palo Alto Networks PAN-OS

A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted…

Fix it

PAN-OS

  • On 10.2.7.xUpgrade to PAN-OS 10.2.7-h34
  • On 10.2.10.xUpgrade to PAN-OS 10.2.10-h36
  • On 10.2.13.xUpgrade to PAN-OS 10.2.13-h21
  • On 10.2.16.xUpgrade to PAN-OS 10.2.16-h7
  • On 10.2.18.xUpgrade to PAN-OS 10.2.18-h6
  • On 11.1.4.xUpgrade to PAN-OS 11.1.4-h33
  • On 11.1.6.xUpgrade to PAN-OS 11.1.6-h32
  • On 11.1.7.xUpgrade to PAN-OS 11.1.7-h6
  • On 11.1.10.xUpgrade to PAN-OS 11.1.10-h25
  • On 11.1.13.xUpgrade to PAN-OS 11.1.13-h5
  • On 11.1.15.xUpgrade to PAN-OS 11.1.15
  • On 11.2.4.xUpgrade to PAN-OS 11.2.4-h17
  • On 11.2.7.xUpgrade to PAN-OS 11.2.7-h13
  • On 11.2.10.xUpgrade to PAN-OS 11.2.10-h6
  • On 11.2.12.xUpgrade to PAN-OS 11.2.12
  • On 12.1.4.xUpgrade to PAN-OS 12.1.4-h5
  • On 12.1.7.xUpgrade to PAN-OS 12.1.7
  • Not affected: Cloud NGFW, Prisma Access (CVE record)
First seen
Last update
Fixed in
  • 12.1.7
  • 12.1.4-h5
  • 11.2.12
  • 11.2.10-h6
  • 11.2.7-h13
  • 11.2.4-h17
  • 11.1.15
  • 11.1.13-h5
  • 11.1.10-h25
  • 11.1.7-h6
  • 11.1.6-h32
  • 11.1.4-h33
  • 10.2.18-h6
  • 10.2.16-h7
  • 10.2.13-h21
  • 10.2.10-h36
  • 10.2.7-h34
Identifiers
CVSS
9.8
Source
news
On the menu as

Timeline

  1. Fix status: unknown → patched.

  2. First reported.

Receipt

Exploitation
No known exploitation
Fix by release line
ProductAffectedFixed inSource
PAN-OSbefore 12.1.712.1.7CVE record (CNA) checked
PAN-OSbefore 12.1.4-h512.1.4-h5CVE record (CNA) checked
PAN-OSbefore 11.2.1211.2.12CVE record (CNA) checked
PAN-OSbefore 11.2.10-h611.2.10-h6CVE record (CNA) checked
PAN-OSbefore 11.2.7-h1311.2.7-h13CVE record (CNA) checked
PAN-OSbefore 11.2.4-h1711.2.4-h17CVE record (CNA) checked
PAN-OSbefore 11.1.1511.1.15CVE record (CNA) checked
PAN-OSbefore 11.1.13-h511.1.13-h5CVE record (CNA) checked
PAN-OSbefore 11.1.10-h2511.1.10-h25CVE record (CNA) checked
PAN-OSbefore 11.1.7-h611.1.7-h6CVE record (CNA) checked
PAN-OSbefore 11.1.6-h3211.1.6-h32CVE record (CNA) checked
PAN-OSbefore 11.1.4-h3311.1.4-h33CVE record (CNA) checked
Score
CVSS 9.8 (critical). CVSS 3.1 9.8 (NVD) for CVE-2026-0264
Last checked

Sources: KEV – CVE record ✓ Vendor ✓

Sources

Totalone very hot coffee